Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/UIWeFGRrDRvejZcwUnEkVr4DB_E.roa
File: UIWeFGRrDRvejZcwUnEkVr4DB_E.roa (raw, json)
Hash identifier: 8MB4BeEynLBZmWkfidvILKBA64JPjBLrzZjFKEVe6EE=
Subject key identifier: 50:85:9E:14:64:6B:0D:1B:DE:8D:97:30:52:71:24:56:BE:03:07:F1
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 01856EA6B50DD980931D972B862A89951B95
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/UIWeFGRrDRvejZcwUnEkVr4DB_E.roa
Signing time: Sun 01 Jan 2023 18:44:57 +0000
ROA not before: Sun 01 Jan 2023 18:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59793
IP address blocks: 2a02:d0c2:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b5:0d:d9:80:93:1d:97:2b:86:2a:89:95:1b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 18:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50859e14646b0d1bde8d973052712456be0307f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:79:60:0d:ad:f2:11:58:e8:bb:aa:fd:c8:
49:aa:43:e0:f5:c1:78:95:da:8f:07:18:96:c5:15:
26:8d:f9:0f:0e:f8:c0:c2:06:50:73:a0:b0:7e:f4:
a5:83:fb:44:00:30:21:e5:b8:00:8d:25:8d:8b:08:
9e:06:18:f2:91:66:78:3b:c8:ee:59:4a:1d:bb:9f:
64:af:47:e4:0b:c5:87:62:42:c0:fc:c3:d8:a9:84:
11:c6:1d:b0:fe:23:8a:ce:e6:8e:51:53:eb:18:a0:
e8:3a:db:78:97:e6:09:7e:cb:7f:50:9c:5b:f0:ed:
8b:84:2f:ac:f3:79:2b:de:8f:f7:85:e6:5d:c0:d5:
1c:00:b2:6e:2e:b5:33:d5:4e:1d:61:ec:1a:85:e4:
61:e5:95:12:4b:9d:3c:37:5e:c7:55:25:8f:22:16:
c6:90:a1:0b:96:8e:d8:e7:01:b3:34:44:e8:04:e4:
3d:f5:b0:d9:78:9e:c5:58:1d:24:b4:bc:e7:e1:0d:
97:2c:b9:a5:1e:72:e5:fe:a2:a3:87:65:a2:4e:79:
8c:7d:7a:ea:c9:57:7c:67:80:07:af:b4:c8:76:1f:
3d:40:73:e4:e9:e1:23:fb:c3:6d:00:00:5c:db:06:
a8:ca:0f:be:76:18:93:6e:f0:4d:e5:8c:8d:c3:ff:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:9E:14:64:6B:0D:1B:DE:8D:97:30:52:71:24:56:BE:03:07:F1
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/UIWeFGRrDRvejZcwUnEkVr4DB_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c2:1::/48
Signature Algorithm: sha256WithRSAEncryption
00:41:81:47:9f:6a:21:14:0a:01:14:53:2b:a7:22:4d:5b:af:
36:ff:61:f5:ed:62:78:4c:78:c0:30:78:f5:6f:44:63:04:6f:
b3:2f:84:ed:92:44:cf:08:df:71:8e:8d:c9:ae:6f:96:04:4b:
f1:d1:ad:e6:6c:ab:bb:4e:1c:f7:d7:bc:e0:0f:ee:ab:75:fe:
a5:f4:47:21:37:6f:0c:89:40:99:b2:74:41:5f:fb:a8:84:d4:
f3:1e:2e:c4:07:78:22:7e:01:b1:db:e2:27:8b:7e:d4:ac:77:
76:de:2d:74:5c:95:68:32:d5:27:82:a2:0c:2c:76:b8:38:4b:
62:bf:9a:b3:e5:c2:f5:ab:b9:8d:5b:d4:34:bd:5f:7f:e7:95:
c7:14:a1:c4:80:5f:d7:c6:58:ac:a4:a4:32:e8:b6:12:54:14:
e1:66:94:70:ee:74:55:c7:a8:37:aa:77:d9:75:75:35:00:ee:
64:14:54:41:ea:3b:b1:e0:8d:e6:72:4c:6e:98:d1:29:41:59:
0f:c7:0e:e9:42:bd:c1:de:80:e9:23:f5:20:a4:ee:57:0f:04:
18:1c:16:8d:ca:35:4d:86:39:32:46:e4:74:e7:5f:03:f0:cf:
32:29:d6:36:f3:e2:a0:d7:19:ae:79:df:ff:52:31:ad:c3:eb:
b2:33:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:03 2025 by rpki-client